Re: [mod-security-users] When will we see 1.8?

[Ivan R. <iv...@we...>]

>>   BTW, I've also added a check to v1.8. If chroot fails for any
>>   reasons, Apache will refuse to serve requests.
> 
> I have a request, though. Can you make it so, that, instead of not serving
> requests, Apache will exit? (with a log message, of course).

  Actually, that's what it does at the moment. But there is a catch.
  Since at that time the configuration phase is over, it is only
  one child that exits. I cannot affect other Apache processes.


> Besides, I believe it is quite fair for mod_security to treat not being able
> to chroot as a critical, abortable, error, like Apache missing a log-file
> (after which Apache exists too).

  I agree but it can't be done any other way. That's the drawback
  of not patching the source code and working from a module.


Bye,
Ivan